Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
Multiple Vulnerabilities in Microsoft Windows - 18 Dec 2004
Two new vulnerabilities exist in Microsoft Windows, both of which could result in escalation of privileges on the vulnerable system.
Ken Pfeil
December 17, 2004
1 Min Read
Reported December 14, 2004, byMicrosoft
VERSIONS AFFECTED
· Microsoft Windows NT Server 4.0 Service Pack 6a · Microsoft Windows NT Server 4.0 Terminal Server Edition Service Pack 6 · Microsoft Windows 2000 Service Pack 3 and Microsoft Windows 2000 Service Pack 4 · Microsoft Windows XP Service Pack 1 · Microsoft Windows Server 2003 · Microsoft Windows XP 64-Bit Edition Service Pack 1 |
DESCRIPTION
Two new vulnerabilities exist in Microsoft Windows, both of which could resultin escalation of privileges on the vulnerable system. The first vulnerabilityis in the way that the Windows Kernel launches applications. The other vulnerabilityis in the way that LSASS validates identity tokens. Both vulnerabilities couldallow a logged-on user to take complete control of the system.
VENDOR RESPONSE
Microsoft has released SecurityBulletin MS04-044, "Vulnerabilities in Windows Kernel and LSASSCould Allow Elevation of Privilege (885835)," to address thesevulnerabilities and recommends that affected users immediately apply theappropriate patch listed in the bulletin.
CREDIT
Discovered by Cesar Cerrudo of Application Security
Read more about:
MicrosoftAbout the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
